FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Port details
bind97 9.7.7 dns Deleted on this many watch lists=12 search for ports that depend on this port An older version of this port was marked as vulnerable.
Deprecated DEPRECATED: No longer supported by ISC, use Bind 9.8 or 9.9
Expired This port expired on: 2013-04-12
BIND DNS suite with updated DNSSEC and threads
Was Maintained by: erwin@FreeBSD.org search for ports maintained by this maintainer
Port Added: 14 Dec 2009 06:25:46
Also Listed In: net ipv6
License: ISCL


Some of the new features of BIND 9.7.x are:

	- Fully automatic signing of zones by "named"
	- Simplified configuration of DNSSEC Lookaside Validation (DLV)
	- Simplified configuration of Dynamic DNS, using the "ddns-confgen"
	  command line tool or the "local" update-policy option
	- New named option "attach-cache" that allows multiple views to
	  share a single cache
	- DNS rebinding attack prevention
	- New default values for dnssec-keygen parameters
	- Support for RFC 5011 automated trust anchor maintenance
	- Smart signing: simplified tools for zone signing and key
	  maintenance
	- Improved PKCS#11 support

WWW: https://www.isc.org/software/bind
SVNWeb : Main Web Site : Distfiles Availability : PortsMon

NOTE: FreshPorts displays only required dependencies information. Optional dependencies are not covered.

Required Libraries:
  1. textproc/libxml2
There are no ports dependent upon this port

No installation instructions: this port has been deleted.

The package name of this deleted port was: bind97


Configuration Options
===> The following configuration options are available for bind97-9.7.7:
     FIXED_RRSET=off
     IDN=off: International Domain Names
     IPV6=on: IPv6 protocol
     LARGE_FILE=off: 64-bit file support
     LINKS=on: Create conf file symlinks in /usr/local
     REPLACE_BASE=off: Replace base BIND with this version
     SIGCHASE=off: dig/host/nslookup will do DNSSEC validation
     SSL=on: Build with OpenSSL (Required for DNSSEC)
     THREADS=on: Threading support
     XML=on: Support for xml statistics output
====> Options available for the group DLZ
     DLZ_POSTGRESQL=off: DLZ Postgres driver
     DLZ_MYSQL=off: DLZ MySQL driver (no threading)
     DLZ_BDB=off: DLZ BDB driver
     DLZ_LDAP=off: DLZ LDAP driver
     DLZ_FILESYSTEM=off: DLZ filesystem driver
     DLZ_STUB=off: DLZ stub driver
===> Use 'make config' to modify these settings

Master Sites:
  1. ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/
  2. ftp://ftp.ciril.fr/pub/isc/bind9/9.7.7/
  3. ftp://ftp.dti.ad.jp/pub/net/isc/bind9/9.7.7/
  4. ftp://ftp.freenet.de/pub/ftp.isc.org/isc/bind9/9.7.7/
  5. ftp://ftp.funet.fi/pub/mirrors/ftp.isc.org/isc/bind9/9.7.7/
  6. ftp://ftp.iij.ad.jp/pub/network/isc/bind9/9.7.7/
  7. ftp://ftp.isc.org/isc/bind9/9.7.7/
  8. ftp://ftp.mirrorservice.org/sites/ftp.isc.org/isc/bind9/9.7.7/
  9. ftp://ftp.nominum.com/pub/isc/bind9/9.7.7/
  10. ftp://ftp.ntua.gr/pub/net/isc/isc/bind9/9.7.7/
  11. ftp://ftp.ripe.net/mirrors/sites/ftp.isc.org/isc/bind9/9.7.7/
  12. ftp://ftp.sunet.se/pub/network/isc/bind9/9.7.7/
  13. ftp://ftp.task.gda.pl/mirror/ftp.isc.org/isc/bind9/9.7.7/
  14. ftp://ftp.u-aizu.ac.jp/pub/net/isc/bind9/9.7.7/
  15. http://ftp.isc.org/isc/bind9/9.7.7/
Port Moves
  • port deleted on 2013-04-20
    REASON: Has expired: No longer supported by ISC, use Bind 9.8 or 9.9

Number of commits found: 44

Commit History - (may be incomplete: see SVNWeb link above for full details)
DateByDescription
23 Apr 2013 09:20:24
Original commit files touched by this commit  9.7.7
Revision:316326
erwin search for other commits by this committer
2013-04-12 dns/bind97: No longer supported by ISC, use Bind 9.8 or 9.9
2013-04-12 dns/bind97-sdb: No longer supported by ISC, use Bind 9.8 or 9.9
2013-04-12 dns/bind-tools: No longer supported by ISC, use Bind 9.8 or 9.9
12 Mar 2013 08:04:21
Original commit files touched by this commit  9.7.7
Revision:313953
erwin search for other commits by this committer
Mark EOL.

http://www.isc.org/software/bind/versions
04 Jan 2013 10:47:28
Original commit files touched by this commit  9.7.7
Revision:309925
erwin search for other commits by this committer
Add LICENSE.
14 Dec 2012 10:43:36
Original commit files touched by this commit  9.7.7
Revision:308897
erwin search for other commits by this committer
- Use new OPTIONS_GROUP for DLZ options.[1]
- This also allows more than one DLZ option
  to be set.[2]

Submitted by:	bapt [1] (as RADIO)
Suggested by:	az [2] (thus GROUP instead)
03 Dec 2012 10:52:11
Original commit files touched by this commit  9.7.7
Revision:308136
erwin search for other commits by this committer
Improve the SSL option description

Submitted by:	Kazunori Fujiwara <fujiwara@jprs.co.jp>
Feature safe:	yes
03 Dec 2012 10:48:18
Original commit files touched by this commit  9.7.7
Revision:308135
erwin search for other commits by this committer
Remove gpg signature checking that in itself does not
provide any additional security.

Feature safe:	yes
27 Nov 2012 10:05:32
Original commit files touched by this commit  9.7.7
Revision:307830
erwin search for other commits by this committer
- Update CONFLICTS
- Fix a typo in the OPTIONSNG conversion
- Add FIXED_RRSET option
- Add RPZ options (9.8 and 9.8 only)

PR:		172586
Submitted by:	Craig Leres <leres@ee.lbl.gov>
Feature safe:	yes
26 Oct 2012 08:37:11
Original commit files touched by this commit  9.7.7
Revision:306427
erwin search for other commits by this committer
Reduce lenght of the option description for DLZ_MYSQL to
avoid problems with the older dialog(1) on FreeBSD 8.x

Noticed by:	Terry Kennedy <terry@tmk.com>
Feature safe:	yes
25 Oct 2012 10:53:57
Original commit files touched by this commit  9.7.7
Revision:306379
erwin search for other commits by this committer
- Convert to OPTIONSNG
- Turn on IPv6 support by default

Feature safe:	yes
19 Oct 2012 09:31:29
Original commit files touched by this commit  9.7.7
Revision:306111
erwin search for other commits by this committer
Update to 9.7.7

Feature safe:	yes
10 Oct 2012 11:54:44
Original commit files touched by this commit  9.7.6.4
Revision:305645
erwin search for other commits by this committer
Upgrade to the latest BIND patch level:

A deliberately constructed combination of records could cause named
to hang while populating the additional section of a response.

Security:	 
http://www.vuxml.org/freebsd/57a700f9-12c0-11e2-9f86-001d923933b6.html
10 Oct 2012 09:11:41
Original commit files touched by this commit  9.7.6.3
Revision:305639 This port version is marked as vulnerable.
erwin search for other commits by this committer
Take maintainership of the BIND ports while I'm working on the latest
security releases.
08 Oct 2012 10:38:48
Original commit files touched by this commit  9.7.6.3
Revision:305526 This port version is marked as vulnerable.
dougb search for other commits by this committer
Throw my ports back in the pool, and make my intentions clear for the
various ports that I've created.

I bid fond fare well
A chapter closes for me
What opens for you?
19 Sep 2012 03:46:36
Original commit files touched by this commit  9.7.6.3
Revision:304476 This port version is marked as vulnerable.
dougb search for other commits by this committer
Upgrade to the latest BIND patch level:

Prevents a crash when queried for a record whose RDATA exceeds
65535 bytes.

Prevents a crash when validating caused by using "Bad cache" data
before it has been initialized.

ISC_QUEUE handling for recursive clients was updated to address
a race condition that could cause a memory leak. This rarely
occurred with UDP clients, but could be a significant problem
for a server handling a steady rate of TCP queries.

A condition has been corrected where improper handling of
zero-length RDATA could cause undesirable behavior, including
termination of the named process.

For more information: https://kb.isc.org/article/AA-00788
24 Jul 2012 19:23:23
Original commit files touched by this commit  9.7.6.2
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Heavy DNSSEC Validation Load Can Cause a "Bad Cache" Assertion Failure
in BIND9

High numbers of queries with DNSSEC validation enabled can cause an
assertion failure in named, caused by using a "bad cache" data structure
before it has been initialized.

CVE: CVE-2012-3817
Posting date: 24 July, 2012
04 Jun 2012 21:51:34
Original commit files touched by this commit  9.7.6.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Upgrade to 9.6-ESV-R7-P1, 9.7.6-P1, 9.8.3-P1, and 9.9.1-P1, the latest
from ISC. These patched versions contain a critical bugfix:

  Processing of DNS resource records where the rdata field is zero length
  may cause various issues for the servers handling them.

  Processing of these records may lead to unexpected outcomes. Recursive
  servers may crash or disclose some portion of memory to the client.
  Secondary servers may crash on restart after transferring a zone
  containing these records. Master servers may corrupt zone data if the
  zone option "auto-dnssec" is set to "maintain". Other unexpected
  problems that are not listed here may also be encountered.

All BIND users are strongly encouraged to upgrade.
23 May 2012 04:41:19
Original commit files touched by this commit  9.7.6
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Upgrade to BIND versions 9.9.1, 9.8.3, 9.7.6, and 9.6-ESV-R7,
the latest from ISC. These versions all contain the following:

Feature Change

*  BIND now recognizes the TLSA resource record type, created to
   support IETF DANE (DNS-based Authentication of Named Entities)
   [RT #28989]

Bug Fix

*  The locking strategy around the handling of iterative queries
   has been tuned to reduce unnecessary contention in a multi-
   threaded environment.

Each version also contains other critical bug fixes.

All BIND users are encouraged to upgrade to these latest versions.
04 Apr 2012 21:49:18
Original commit files touched by this commit  9.7.5
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to version 9.7.5, the latest from ISC, which contains numerous bug fixes.

For the port, switch to using the PORTDOCS macro.

Feature safe:   yes
16 Nov 2011 23:41:13
Original commit files touched by this commit  9.7.4.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Upgrade to the latest security patch releases to address the
following DDOS bug:

Recursive name servers are failing with an assertion:
INSIST(! dns_rdataset_isassociated(sigrdataset))

At this time it is not thought that authoritative-only servers
are affected, but information about this bug is evolving rapidly.

Because it may be possible to trigger this bug even on networks
that do not allow untrusted users to access the recursive name
servers (perhaps via specially crafted e-mail messages, and/or
malicious web sites) it is recommended that ALL operators of
recursive name servers upgrade immediately.

For more information see:
https://www.isc.org/software/bind/advisories/cve-2011-tbd
which will be updated as more information becomes available.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4313

Feature safe:   yes
24 Oct 2011 04:17:38
Original commit files touched by this commit  9.7.4
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Remove more tags from pkg-descr files fo the form:

- Name
em@i.l

or variations thereof. While I'm here also fix some whitespace and other
formatting errors, including moving WWW: to the last line in the file.
09 Sep 2011 20:55:32
Original commit files touched by this commit  9.7.4
 This port version is marked as vulnerable.
dougb search for other commits by this committer
BIND version 9.7 with support for sdb database drivers, including ldap and
postgresql.

WWW: https://www.isc.org/software/bind/

PR:             ports/157752
Submitted by:   Josh Carroll <josh.carroll@gmail.com>
02 Aug 2011 07:03:06
Original commit files touched by this commit  9.7.4
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to version 9.7.4 which contains various bug fixes and improvements:

ftp://ftp.isc.org/isc/bind9/9.7.4/RELEASE-NOTES-BIND-9.7.4.html
02 Aug 2011 07:01:37
Original commit files touched by this commit  9.7.3.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Remove patch incorporated into version 9.7.4
17 Jul 2011 04:08:59
Original commit files touched by this commit  9.7.3.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Fix the location of the default pid file in named.8

Problem pointed out in the PR

PR:             conf/155006
Submitted by:   Helmut Schneider <jumper99@gmx.de>
05 Jul 2011 21:18:24
Original commit files touched by this commit  9.7.3.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to versions 9.7.3-P3, and 9.6-ESV-R4-P3.

ALL BIND USERS ARE ENCOURAGED TO UPGRADE IMMEDIATELY

This update addresses the following vulnerability:

CVE-2011-2464
=============
Severity:       High
Exploitable:    Remotely

Description:

A defect in the affected BIND 9 versions allows an attacker to remotely
cause the "named" process to exit using a specially crafted packet. This
defect affects both recursive and authoritative servers. The code location
of the defect makes it impossible to protect BIND using ACLs configured
within named.conf or by disabling any features at compile-time or run-time.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464
https://www.isc.org/software/bind/advisories/cve-2011-2464
28 May 2011 00:16:58
Original commit files touched by this commit  9.7.3.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Fix PKGVERSION for 9.7.3-P1

Submitted by:   Craig Leres <leres@ee.lbl.gov>
27 May 2011 23:47:39
Original commit files touched by this commit  9.7.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Upgrade to 9.6-ESV-R4-P1 and 9.7.3-P1, which address the following issues:

1. Very large RRSIG RRsets included in a negative cache can trigger
an assertion failure that will crash named (BIND 9 DNS) due to an
off-by-one error in a buffer size check.

This bug affects all resolving name servers, whether DNSSEC validation
is enabled or not, on all BIND versions prior to today. There is a
possibility of malicious exploitation of this bug by remote users.

2. Named could fail to validate zones listed in a DLV that validated
insecure without using DLV and had DS records in the parent zone.

Add a patch provided by ru@ and confirmed by ISC to fix a crash at
shutdown time when a SIG(0) key is being used.
16 May 2011 05:22:09
Original commit files touched by this commit  9.7.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Miscellaneous cleanups and fixes, some of the windowmaker stuff
gracefully provided by danfe.
15 Feb 2011 01:47:13
Original commit files touched by this commit  9.7.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to 9.7.3, the latest from ISC:

 * Zones may be dynamically added and removed with the "rndc addzone"
   and "rndc delzone" commands. These dynamically added zones are
   written to a per-view configuration file. Do not rely on the
   configuration file name nor contents as this will change in a
   future release. This is an experimental feature at this time.
 * A new command "rndc secroots" was added to dump a combined summary
   of the currently managed keys combined with statically configured
   trust anchors.
 * Added support to load new keys into managed zones without signing
   immediately with "rndc loadkeys". Added support to link keys with
   "dnssec-keygen -S" and "dnssec-settime -S".
18 Dec 2010 02:19:41
Original commit files touched by this commit  9.7.2.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
CONFLICTS for bind98
03 Dec 2010 22:39:44
Original commit files touched by this commit  9.7.2.3
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to version 9.7.2-P3, the latest from ISC, which addresses
the following security vulnerabilities.

For more information regarding these issues please see:
http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories

1. Cache incorrectly allows ncache and rrsig for the same type

   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613

   Affects resolver operators whose servers are open to potential
   attackers. Triggering the bug will cause the server to crash.

   This bug applies even if you do not have DNSSEC enabled.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
03 Dec 2010 19:39:48
Original commit files touched by this commit  9.7.2.2
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Convert this to a master port for ../bind-tools

Remove CONFLICTS for the now-removed BIND 9.3

Remove OPTION for threads on < RELENG_7

Remove MD5 from distinfo
18 Oct 2010 21:06:09
Original commit files touched by this commit  9.7.2.2
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to 9.7.2-P2, the latest version from ISC
17 Jul 2010 07:54:40
Original commit files touched by this commit  9.7.1.2
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Updgrade to version 9.7.1-P2 which addresses a DNSSEC-related bug.

If a query is made explicitly for a record of type 'RRSIG' to a validating
recursive server running BIND 9.7.1 or 9.7.1-P1, and the server has one or
more trust anchors configured statically and/or via DLV, then if the answer
is not already in cache, the server enters a loop which repeatedly generates
queries for RRSIGs to the authoritative servers for the zone containing the
queried name.

CVE:    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0213
CERT:   http://www.kb.cert.org/vuls/id/211905

Versions affected:      9.7.1, 9.7.1-P1
Severity:               High
Exploitable:            remotely

http://www.isc.org/software/bind/advisories/cve-2010-0213
10 Jul 2010 21:36:05
Original commit files touched by this commit  9.7.1.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Upgrade to version 9.7.1-P1. The patch addresses 2 areas in the resolver
code where the 9.7.x series tightened its adherence to the DNS protocol
as written, vs. the 9.6.x series which was more liberal in what it accepted.

Specifically:
1. Restore processing of certain forms of negative responses that do
   not contain all of the required elements to avoid aggressive
   re-querying of authority servers.
2. Accept answers from authority servers without the AA bit set
   if they meet the other requirements of an answer packet.

More detail can be found here:
https://www.isc.org/community/blog/201007/compatibility-issues-bind-970-and-971
18 Jun 2010 05:41:27
Original commit files touched by this commit  9.7.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Turns out that the bind.keys.h file is not a new dependency, so my previous
fix was too hasty. Employ a more robust fix that removes the _perl_ dep for
both this file and bind9.xsl.h. The pre-generated versions of these files
are identical to the newly generated ones, which is why this perl issue
never came up previously.

I still have reservations about baking the ISC DLV key into named, but given
that this was already done in 9.7.0+ at least this way we don't violate POLA.
18 Jun 2010 02:29:06
Original commit files touched by this commit  9.7.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
The newly added bind.keys.h file requires perl for its creation,
which is a problem, however what it's doing is baking the ISC
DLV key into named which is not something I think is reasonable
to do by default.

So, instead of adding perl as a build dependency eliminate the
need for the file altogether.
17 Jun 2010 22:35:10
Original commit files touched by this commit  9.7.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to version 9.7.1, the latest from ISC.

This version has numerous minor bug fixes, please refer to the
CHANGES file for details. Many (but not all) of the fixes are
DNSSEC-related, and all users who are doing DNSSEC validation
are encouraged to upgrade to this version.
20 May 2010 06:34:15
Original commit files touched by this commit  9.7.0.2
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to the latest patch set from ISC, which addresses the following:

   Named could return SERVFAIL for negative responses
   from unsigned zones.
17 Mar 2010 05:35:03
Original commit files touched by this commit  9.7.0.1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to the latest patchfix releases to deal with the problems
related to the handling of broken DNSSEC trust chains.

This fix is only necessary for those who have DNSSEC validation
enabled and configure trust anchors from third parties, either
manually, or through a system like DLV.
17 Feb 2010 06:13:15
Original commit files touched by this commit  9.7.0
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to the release version of BIND 9.7.0, and remove the -devel
suffix as a result.

Feature safe:   yes
01 Feb 2010 20:57:31
Original commit files touched by this commit  9.7.0.rc2
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Update to 9.7.0rc2 which has numerous bug fixes, especially
for DNSSEC.
14 Dec 2009 07:50:20
Original commit files touched by this commit  9.7.0.rc1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Disable the (optional, debugging) symtable feature till I can figure
out the depth of the perl dependency.
14 Dec 2009 06:25:17
Original commit files touched by this commit  9.7.0.rc1
 This port version is marked as vulnerable.
dougb search for other commits by this committer
Add BIND 9.7.0rc1 with a -devel suffix for now so that people can
start testing it sooner rather than later. When the final version
is released the -devel will be removed.

Some of the new features of BIND 9.7.x are:

        - Fully automatic signing of zones by "named"
        - Simplified configuration of DNSSEC Lookaside Validation (DLV)
        - Simplified configuration of Dynamic DNS, using the "ddns-confgen"
          command line tool or the "local" update-policy option
        - New named option "attach-cache" that allows multiple views to
          share a single cache
        - DNS rebinding attack prevention
        - New default values for dnssec-keygen parameters
        - Support for RFC 5011 automated trust anchor maintenance
          (see README.rfc5011 for additional details)
        - Smart signing: simplified tools for zone signing and key
          maintenance
        - Improved PKCS#11 support

Number of commits found: 44

Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
chromiumAug 26
fileAug 21
py-djangoAug 21
py-django-develAug 21
py-django14Aug 21
py-django15Aug 21
php53Aug 18
phpmyadminAug 17
chromiumAug 13
serfAug 11
subversionAug 11
subversion17Aug 11
nginxAug 09
nginx-develAug 09
mingw32-opensslAug 06

6 vulnerabilities affecting 9 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24503
Broken 219
Deprecated 742
Ignore 563
Forbidden 36
Restricted 261
No CDROM 101
Vulnerable 23
Expired 0
Set to expire 732
Interactive 0
new 24 hours 2
new 48 hours13
new 7 days51
new fortnight96
new month251

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.